Security Advisory

CVE-2023-25764

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-02-15 00:00:00

Last updated 2025-03-19 16:24:33

Assigner jenkins

State PUBLISHED

Description

Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create or change custom email templates.

← Browse all CVEs View on cve.org ↗